security-review-workflow

by wimi321

Install this Skill

curl -fsSL -o security-review-workflow.zip https://skill.seembox.com/api/v1/skills/security-review-workflow/download && unzip security-review-workflow.zip

Download security-review-workflow.zip

SKILL.md About

---
name: "security_review_workflow"
description: "Use when the current branch or PR needs a focused security review that minimizes false positives and only reports concrete, exploit-relevant issues."
---

# Security Review Workflow

Use this skill for focused security review of branch or PR changes.

## Workflow
1. Collect git status, changed files, commit list, and full diff against the target base.
2. Research the codebase's existing security patterns.
3. Inspect only newly introduced attack surfaces in the diff.
4. Filter out speculative, low-signal, or excluded finding classes.
5. Report only concrete, actionable findings with file, severity, exploit path, and recommendation.

## Guardrails
- Minimize false positives aggressively.
- Ignore general code review comments that are not security issues.
- Prefer fewer high-confidence findings over noisy coverage.

## Example Requests
- Review this branch only for concrete security bugs.
- Find high-confidence vulnerabilities in the current diff and ignore noise.

## Inputs
- Diff against base
- Changed files
- Relevant security context

## Outputs
- High-signal security findings
- Severity and exploit path
- Fix recommendations

## Success Criteria
- Only concrete issues are reported.
- False positives are aggressively filtered.
- Each finding is actionable.

## Non-Goals
- General style review
- Speculative low-confidence security commentary

## Source Provenance
Derived from `src/commands/security-review.ts`.

_meta.json Metadata

{
  "ownerId": "kn7a01bsk4eqnxk0ehtxqwqaq183yxpt",
  "publishedAt": 1775150224456,
  "slug": "security-review-workflow",
  "version": "1.0.0"
}